1902 matches found
Computer Laboratory Management System 安全漏洞
Computer Laboratory Management System is a computer laboratory management system. A security vulnerability exists in Computer Laboratory Management System v1.0, which stems from a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML via a crafted...
idccms 安全漏洞
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Brokerage System is a cloud management brokerage system from China's Net Titanium Technology, Inc. A security vulnerability exists in version 1.35 of idccms, which contains a cross-site request forgery CSRF vulnerability...
Human Resource Management System 安全漏洞
Human Resource Management System is a human resource management system by maverickosama Individual Developer. A security vulnerability exists in Sourcecodester Human Resource Management System version 1.0, which stems from the presence of insecure privileges...
The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code
The vulnerability of DNS servers for Windows operating systems relates to the use of memory after it is freed during request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Ruijie Networks RG-UAC 操作系统命令注入漏洞
Ruijie Networks RG-UAC is an Internet behavior management and auditing product from China's Ruijie Networks Ruijie Networks. It is used to solve Internet auditing problems. An operating system command injection vulnerability exists in Ruijie Networks RG-UAC 20240428 and earlier versions, which...
IBM Aspera 操作系统命令注入漏洞
IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. An operating system command injection vulnerability exists in IBM Aspera Orchestrator version 4.0.1. The vulnerability stems from the application failing to...
CVE-2024-25047
IBM Cognos Analytics 11.2.0 through 11.2.4 and 12.0.0 through 12.0.2 is vulnerable to injection attacks in application logging by not sanitizing user provided data. This could lead to further attacks against the system. IBM X-Force ID: 282956...
CVE-2023-23021
Cross Site Scripting XSS vulnerability in sourcecodester oretnom23 pos point sale system 1.0, allows attackers to execute arbitrary code via the code, name, and description inputs in file Main.php...
SonicWALL GMS 安全漏洞
SonicWALL GMS is a global management system from SonicWALL, Inc. a powerful and intuitive solution for organizations, distributed enterprises, and service providers to centrally manage and rapidly deploy SonicWall Firewall, Anti-Spam, Backup and Recovery, and Secure Remote Access solutions. A...
Aruba Networks ArubaOS 安全漏洞
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks, including Mobility Controllers and Mobility Access Switches, from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ArubaOS that originates from an unauthenticated denial of service vulnerabili...
The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche allows a hacker to disclose protected information.
The vulnerability of the WLAvalancheService component in the mobile device management system of Avalanche relates to memory-walking attacks. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information that is protected by the system...
The vulnerability of the svc_topstats utility in the Dell Unity Operating Environment (OE) system allows a hacker to overwrite any files with root privileges.
The vulnerability of the svctopstats utility in the Dell Unity Operating Environment OE storage system exists because measures to neutralize special elements used in the operating system commands have not been taken. Exploiting this vulnerability could allow a malicious individual to rewrite any...
The vulnerability of the PAN-OS operating system, related to the unlimited distribution of resources, allows a perpetrator to trigger a service failure.
The vulnerability of the PAN-OS operating system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created package...
CVE-2024-3781 OS Command Injection vulnerability in WBSAirback
Command injection vulnerability in the operating system. Improper neutralisation of special elements in Active Directory integration allows the intended command to be modified when sent to a downstream component in WBSAirback 21.02.04...
CVE-2024-26226 Windows Distributed File System (DFS) Information Disclosure Vulnerability
...
Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-3364
A vulnerability was found in SourceCodester Online Library System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file admin/books/index.php. The manipulation of the argument id leads to cross site scripting. The attack can be initiated remotely. The explo...
Lenovo ThinkStation 安全漏洞
Lenovo ThinkStation Lenovo Desktop Workstation is a desktop workstation from the Chinese company Lenovo. A security vulnerability exists in the BIOS of Lenovo Desktop, Smart Edge, and ThinkStation, which originates from a vulnerability that allows a local attacker with elevated privileges to writ...
Dell vApp Manager OS Command Injection Vulnerability (CNVD-2024-16928)
Dell vApp Manager is a virtual application manager from Dell USA. An operating system command injection vulnerability exists in Dell vApp Manager versions prior to 9.2.4.9, which can be exploited by an attacker to cause the execution of inserted commands...
